diff --git a/docs/reference/images/ingest/custom-logs-pipeline.png b/docs/reference/images/ingest/custom-logs-pipeline.png
index e0806d58e28af..215038a457eb7 100644
Binary files a/docs/reference/images/ingest/custom-logs-pipeline.png and b/docs/reference/images/ingest/custom-logs-pipeline.png differ
diff --git a/docs/reference/images/ingest/custom-logs.png b/docs/reference/images/ingest/custom-logs.png
index aa8f9ca1f650d..d1350ae065575 100644
Binary files a/docs/reference/images/ingest/custom-logs.png and b/docs/reference/images/ingest/custom-logs.png differ
diff --git a/docs/reference/images/ingest/ingest-pipeline-list.png b/docs/reference/images/ingest/ingest-pipeline-list.png
index ccc52878975e7..1d3281e669224 100644
Binary files a/docs/reference/images/ingest/ingest-pipeline-list.png and b/docs/reference/images/ingest/ingest-pipeline-list.png differ
diff --git a/docs/reference/images/ingest/ingest-pipeline-processor.png b/docs/reference/images/ingest/ingest-pipeline-processor.png
index 1dbce0f27e98d..5fff064253a8e 100644
Binary files a/docs/reference/images/ingest/ingest-pipeline-processor.png and b/docs/reference/images/ingest/ingest-pipeline-processor.png differ
diff --git a/docs/reference/images/ingest/test-a-pipeline.png b/docs/reference/images/ingest/test-a-pipeline.png
index a5b83e200ff07..65ee2815ebe1d 100644
Binary files a/docs/reference/images/ingest/test-a-pipeline.png and b/docs/reference/images/ingest/test-a-pipeline.png differ
diff --git a/docs/reference/ingest/common-log-format-example.asciidoc b/docs/reference/ingest/common-log-format-example.asciidoc
index d763d6d5ab13e..05f012ab53448 100644
--- a/docs/reference/ingest/common-log-format-example.asciidoc
+++ b/docs/reference/ingest/common-log-format-example.asciidoc
@@ -39,7 +39,7 @@ image::images/ingest/ingest-pipeline-list.png[Kibana's Ingest Node Pipelines lis
 +
 [source,grok]
 ----
-%{IPORHOST:source.ip} %{USER:user.id} %{USER:user.name} \[%{HTTPDATE:@timestamp}\] "%{WORD:http.request.method} %{DATA:url.original} HTTP/%{NUMBER:http.version}" %{NUMBER:http.response.status_code:int} (?:-|%{NUMBER:http.response.body.bytes:int}) %{QS:http.request.referrer} %{QS:user_agent}
+%{IPORHOST:source.ip} %{USER:user.id} %{USER:user.name} \\[%{HTTPDATE:@timestamp}\\] \"%{WORD:http.request.method} %{DATA:url.original} HTTP/%{NUMBER:http.version}\" %{NUMBER:http.response.status_code:int} (?:-|%{NUMBER:http.response.body.bytes:int}) %{QS:http.request.referrer} %{QS:user_agent}
 ----
 // NOTCONSOLE
 +